Skip to content
Permalink
Browse files

[e] (0) Make a note of some places where user-agent-defined behaviour…

… can trivially be used for fingerprinting. (There are other places that have user-agent-defined behaviour that could in theory be used that way too that I haven't marked because in practice I expect user agents will either converge on a single value or will vary from page load to page load. Feel free to file a bug if you find cases that are real vectors that I haven't marked.)

Affected topics: HTML, Video and Audio

git-svn-id: http://svn.whatwg.org/webapps@7996 340c8d12-0b0e-0410-8428-c7bf67bfef74
  • Loading branch information...
Hixie committed Jun 24, 2013
1 parent ba3fbca commit 724f9381c7956d0a3cf4dda8f489ced46089ecf5
Showing with 20 additions and 8 deletions.
  1. +7 −3 complete.html
  2. +7 −3 index
  3. +6 −2 source

<header class=head id=head><p><a class=logo href=http://www.whatwg.org/><img alt=WHATWG height=101 src=/images/logo width=101></a></p>
<hgroup><h1 class=allcaps>HTML</h1>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 21 June 2013</h2>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 24 June 2013</h2>
</hgroup><dl><dt><strong>Web developer edition:</strong></dt>
<dd><strong><a href=http://developers.whatwg.org/>http://developers.whatwg.org/</a></strong></dd>
<dt>Multiple-page version:</dt>
zero time on the <a href=#media-timeline>media timeline</a> should correspond to the first frame of the
<a href=#media-resource>media resource</a>. In the even rarer case of a <a href=#media-resource>media resource</a> with no
explicit timings of any kind, not even frame durations, the user agent must itself determine the
time for each frame in a user-agent-defined manner.</p>
time for each frame in a user-agent-defined manner.
<a class=fingerprint href=#fingerprinting-vector title="fingerprinting vector"><img alt="(This is a fingerprinting vector.)" height=64 src=http://images.whatwg.org/fingerprint.png width=46></a>
</p>

<p class=note>An example of a file format with no explicit timeline but with explicit frame
durations is the Animated GIF format. An example of a file format with no explicit timings at all
<li><p>Let <var title="">target</var> be <dfn id=in-error-reporting-mode>in error reporting mode</dfn>.</li>

<li><p>Let <var title="">message</var> be a user-agent-defined
string describing the error in a helpful manner.</li>
string describing the error in a helpful manner.
<a class=fingerprint href=#fingerprinting-vector title="fingerprinting vector"><img alt="(This is a fingerprinting vector.)" height=64 src=http://images.whatwg.org/fingerprint.png width=46></a>
</li>

<li>

10 index

<header class=head id=head><p><a class=logo href=http://www.whatwg.org/><img alt=WHATWG height=101 src=/images/logo width=101></a></p>
<hgroup><h1 class=allcaps>HTML</h1>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 21 June 2013</h2>
<h2 class="no-num no-toc">Living Standard &mdash; Last Updated 24 June 2013</h2>
</hgroup><dl><dt><strong>Web developer edition:</strong></dt>
<dd><strong><a href=http://developers.whatwg.org/>http://developers.whatwg.org/</a></strong></dd>
<dt>Multiple-page version:</dt>
zero time on the <a href=#media-timeline>media timeline</a> should correspond to the first frame of the
<a href=#media-resource>media resource</a>. In the even rarer case of a <a href=#media-resource>media resource</a> with no
explicit timings of any kind, not even frame durations, the user agent must itself determine the
time for each frame in a user-agent-defined manner.</p>
time for each frame in a user-agent-defined manner.
<a class=fingerprint href=#fingerprinting-vector title="fingerprinting vector"><img alt="(This is a fingerprinting vector.)" height=64 src=http://images.whatwg.org/fingerprint.png width=46></a>
</p>

<p class=note>An example of a file format with no explicit timeline but with explicit frame
durations is the Animated GIF format. An example of a file format with no explicit timings at all
<li><p>Let <var title="">target</var> be <dfn id=in-error-reporting-mode>in error reporting mode</dfn>.</li>

<li><p>Let <var title="">message</var> be a user-agent-defined
string describing the error in a helpful manner.</li>
string describing the error in a helpful manner.
<a class=fingerprint href=#fingerprinting-vector title="fingerprinting vector"><img alt="(This is a fingerprinting vector.)" height=64 src=http://images.whatwg.org/fingerprint.png width=46></a>
</li>

<li>

8 source
zero time on the <span>media timeline</span> should correspond to the first frame of the
<span>media resource</span>. In the even rarer case of a <span>media resource</span> with no
explicit timings of any kind, not even frame durations, the user agent must itself determine the
time for each frame in a user-agent-defined manner.</p>
time for each frame in a user-agent-defined manner.
<!--INSERT FINGERPRINT-->
</p>

<p class="note">An example of a file format with no explicit timeline but with explicit frame
durations is the Animated GIF format. An example of a file format with no explicit timings at all
<li><p>Let <var title="">target</var> be <dfn>in error reporting mode</dfn>.</p></li>

<li><p>Let <var title="">message</var> be a user-agent-defined
string describing the error in a helpful manner.</p></li>
string describing the error in a helpful manner.
<!--INSERT FINGERPRINT-->
</p></li>

<li>

0 comments on commit 724f938

Please sign in to comment.
You can’t perform that action at this time.